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(57) Abstract: In a network having a plurality of user terminals and a user authentication site, a method for authenticating a user. 

JTj A user terminal of the network receives a password from a user, and translates the password into an authentication encryption key 
for the user. The terminal generates a first random number, encrypts the first random number with the authentication encryption key 

^ to provide a first encrypted message, and transmits the first encrypted message to the user authentication site. The user authehtica^ 
tion site decrypts the encrypted first message to provide the first random number, and generates a second random number, which is 

^ transmitted to the user terminal. The user terminal combines and encrypts the first and second random numbers, with the authenti- 
cation encryption key. to provide a second encrypted message. The user terminal transmits the second encrypted message to the user 

Q authentication site; which decrypts the encrypted second message to provide the combined first and second random numbers. The 

^ user authentication site verifies that the first and second random numbers are correct, arid authenticates the user in accordance with 

^ this verification. 
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